none
KB3000061 failure configuring windows updates, reverting changes RRS feed

  • Question

  • I have 3 desktop machines, my main one running Windows 8.1, my backup system Windows 8, and an older machine with Windows 7. First on my Windows 8 machine update showed 18 important updates. I checked all of them and restarted. After rebooting it started the configuring and then gave an error "Failure configuring windows updates, reverting changes" After restarting Windows update still showed the same 18 updates. I ran the update troubleshooter from http://support.microsoft.com/kb/949358 and it showed that it fixed 3 errors. Same thing happened when I tried installing all the updates from the control panel. I then installed all the updates one at a time and everything worked OK except KB3000061. I ran the troubleshooter again and manually installed KB3000061. Same error on reboot. I had no problems with all the updates on the Windows 8.1 and 7 machines. On the 8.1 machine I manually installed KB3000061 before running the 17 other updates from the control panel. Is this update really necessary if I am not stupid enough to click spam email attachments or messages that tell me I need to update flash player or some other program? I use Firefox since it is much more secure than Explorer.
    Wednesday, October 15, 2014 6:59 PM

Answers

  • Same issue here...

    On server 2012 (not R2)

    Update KB3000061, installation failed with error 80073AA2, it installs correctly, but after the reboot & reverting changes, it's like nothing happened...

    Solved by removing registry key : 

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}

    Export the key, delete it, restart machine, run update, restart machine, import key again and good to go.

    Tuesday, October 21, 2014 2:05 PM

All replies

  • Hi,

    According to the description about KB3000061 of the link below:

    https://support.microsoft.com/kb/3000061?wa=wsignin1.0

    This security update also includes some nonsecurity updates and fixes as follows:

    1. The update adds capabilities to determine application compatibility problems and effects.
    2. The update addresses an issue in which an application such as Microsoft Word or Microsoft PowerPoint seems to freeze when you open a document that contains a large EMF file. After you install this security update, you can stop the application without waiting for win32k.sys to finish processing the EMF file.
    3. The update includes a fix for the issue that is described in the following article in the Microsoft Knowledge Base: 2998984 You cannot dock MicroStation toolbars after you install update 2973201 in Windows.

    This update is not just fix IE components potential problem. We suggest you install all Windows updates incase Windows user encounter any potential threat.

    For your current problem, firstly, I'd to suggest you access to Safe Mode to install this update for test to avoid it is 3rd application prevents its installation.

    If still no use, please collect CBS.log and upload it to your OneDrive sharing space, then post the sharing link here.

    CBS.log: C:\Windows\Logs\CBS


    Roger Lu
    TechNet Community Support

    Thursday, October 16, 2014 6:16 AM
    Moderator
  • KB 3000061.   Same issue as jcs916 on a Win8.0 Pro/64 machine.   Only remaining update listed and during reboot it reverts the change.  

    One other 8.0 Pro/64 machine took this update okay yesterday, as did an 8.1 Pro/64 machine.  


    Thursday, October 16, 2014 4:37 PM
  • Same issue with two different laptop LENOVO and ASUS

    Windows 8 enterprise 32 bits

    I think KB3000061 is corrupted

    Thursday, October 16, 2014 9:50 PM
  • Hello,

    we do want to see the CBS logs from the machines where you are encountering this.

    Can you make them available for download?

    All the logs under c:\Windows\logs\cbs


    Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Thursday, October 16, 2014 10:57 PM
  • 2 log-files from failed installations of KB 3000061:  http : // 1drv.ms / 1wd4im9

    Sorry for the strange URL with the blanks but I get a not allowed message when I try to insert a correct URL.


    • Edited by WS2212 Friday, October 17, 2014 8:54 AM
    Friday, October 17, 2014 8:38 AM
  • 2 log-files from failed installations of KB 3000061:  http : // 1drv.ms / 1wd4im9

    Sorry for the strange URL with the blanks but I get a not allowed message when I try to insert a correct URL.


    Dear Microsoft-Support.

    I have had identical problem with KB300061 but installing the Updates on "Windows Server 2012".

    After several approaches to install the complete bundle of updates I started to install them in smaller packages and after several installs an reboots I configured exact problem with KB300061

    My CBS.Log-File kann be downloaded from here:

    https://drive.google.com/file/d/0BwISJrTfCb1kTXVaNDNpZldyYzQ/view?usp=sharing

    I hope, it will help you to understand and create some hotfix for it.

    Dietmar

    Friday, October 17, 2014 6:05 PM
  • I hope, it will help you to understand and create some hotfix for it.

    FWIW it looks like it is being processed in pieces and there is no awareness of that fact.  So each piece is getting

    [HRESULT=0x800f0805-CBS_E_INVALID_PACKAGE]

    As usual being unable to read between the lines of these messages and not having access to the support documentation I would be running ProcMon to see what other diagnostics might be being generated as well as supplement the ones that you see.  Filter with  Operation Is WriteFile.



    Robert Aldwinckle
    ---

    Friday, October 17, 2014 7:12 PM
  • win 8, x86.

    the same issue

    Saturday, October 18, 2014 4:47 AM
  • Same Issue Windows Server 2012
    Saturday, October 18, 2014 1:23 PM
  • Same problem on Windows Server 2012.

    KB3000061 fails to install.

    Once this happens I get error 0x800f0922 if I try to reinstall any other updates. All future update attempts fail. I also cannot add or remove Windows Server Roles or Features. This is our production web server for our online retail business, so this is a bid deal for us.

    Luckily I have backups and was able to roll back the system state to a time prior to the update and install all other updates but this one.

    Saturday, October 18, 2014 3:26 PM
  • Same issue here...

    On server 2012 (not R2)

    Update KB3000061, installation failed with error 80073AA2, it installs correctly, but after the reboot & reverting changes, it's like nothing happened...

    Tuesday, October 21, 2014 10:13 AM
  • Same issue here...

    On server 2012 (not R2)

    Update KB3000061, installation failed with error 80073AA2, it installs correctly, but after the reboot & reverting changes, it's like nothing happened...

    Solved by removing registry key : 

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}

    Export the key, delete it, restart machine, run update, restart machine, import key again and good to go.

    Tuesday, October 21, 2014 2:05 PM
  • On server 2012 (not R2)

    Solved by removing registry key : 

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}

    Export the key, delete it, restart machine, run update, restart machine, import key again and good to go.

    I agree, für Windows Server 2012 (not R2)
    Following suggestion from StevenDeBr solved also my problem.

    I have voted for your answer :-)

    Thanks Dietmar



    • Edited by dm01 Tuesday, October 21, 2014 9:32 PM added Voted comment
    Tuesday, October 21, 2014 9:31 PM
  • Thanks Steven - My problem was with W8Pro - Same as all the above - This fix worked great - GREAT FORUM - 

    Again, thanks

    John

    Tuesday, October 21, 2014 9:58 PM
  • Hello,

    I would like to see more logs from these failures.

    Thanks for ones we have gotten so far, but we could use some more.

    looking for the logs under c:\windows\logs\CBS.

    if they could be made available for download that would be great.

    or you can email the logs ( zipped up please)

    My first name and last initial @microsoft.com


    Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, October 22, 2014 1:09 AM
  • Hello,

    I would like to see more logs from these failures.

    Thanks for ones we have gotten so far, but we could use some more.

    looking for the logs under c:\windows\logs\CBS.

    if they could be made available for download that would be great.

    or you can email the logs ( zipped up please)

    My first name and last initial @microsoft.com


    Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Hi Darrell,

    I could send you my log file, but just be clear on the email address, the prefix would be darrelg ?

    Cheers

    Steven


    • Edited by StevenDeBr Wednesday, October 22, 2014 12:37 PM
    Wednesday, October 22, 2014 12:16 PM
  • Hello,

    Two LLs are in the name.


    Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, October 22, 2014 4:46 PM
  • Hello,

    Two LLs are in the name.


    Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Hi,

    Apologies about the name :-) I've emailed the zipped log file just now.

    Thursday, October 23, 2014 7:06 AM
  • Can one of you experiencing this issue do the following for me please.

    If you don’t have KB2756872, install it and retry the update

    If you do have KB2756872:

    1. Go to http://www.microsoft.com/en-us/download/details.aspx?id=34908
    2. Click download
    3. Select delmigprov.exe
    4. Confirm
    5. Run that executable locally
    6. Try installing the update again and let me know if it works

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/


    Thursday, October 23, 2014 4:05 PM
  • And just a quick point of clarification, although the information for KB2756872 references Win8, the x64 package is applicable to Windows Server 2012 as well.  This may require a restart of your system to complete.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Thursday, October 23, 2014 7:35 PM
  • Where exactly is the download button on this page?
    Thursday, October 23, 2014 7:50 PM
  • Where exactly is the download button on this page?
    Sorry, enhanced security on the Server browser hides the link. I downloaded from my desktop and will try this fix.
    Thursday, October 23, 2014 8:18 PM
  • Can one of you experiencing this issue do the following for me please.

    If you don’t have KB2756872, install it and retry the update

    If you do have KB2756872:

    1. Go to http://www.microsoft.com/en-us/download/details.aspx?id=34908
    2. Click download
    3. Select delmigprov.exe
    4. Confirm
    5. Run that executable locally
    6. Try installing the update again and let me know if it works

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/


    Already had KB2756872, so ran delmigprov.exe and then tried reinstalling the update. The failure code was 80246013.
    Thursday, October 23, 2014 8:23 PM
  • Thanks.  Could you share out your current CBS.logs somewhere for me?

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Thursday, October 23, 2014 9:04 PM
  • Hi Darrell

    I've emailed you my cbs.log; same symptoms as OP here.

    KB2756872 was already installed. I have not run delmigprov; I did a file search across the Windows folder and did not find it. Where would I find it? And what does it do? This is a production server so I need to understand that first.

    Thanks!

    Friday, October 24, 2014 3:20 PM
  • delmigprov is a tool that cleans up the WMI provider list.  The failures I've seen in some of the logs point to WMI providers failing and this tool should clean those up.  You can run it by going back to the KB2756872 download page, selecting to download and then selecting just the tool.  Run it locally and then reattempt the patch installation.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Friday, October 24, 2014 3:30 PM
  • Thanks Joseph.

    I downloaded and ran DELMIGPROV and the update still "reverted changes" during the reboot.

    Thanks!

    Friday, October 24, 2014 3:52 PM
  • That's unfortunate, can you upload your new CBS logs somewhere I can reach them or you can send them to Darrell and he can get them to me.  Thanks!

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Friday, October 24, 2014 3:56 PM
  • Hi Joseph

    On its way c/o Darrell.

    Thanks!

    Friday, October 24, 2014 4:02 PM
  • Thanks, Darrell just sent them over to me.  By any chance is this server a RODC? 

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Friday, October 24, 2014 4:51 PM
  • No. Its only purpose in life is to download a text file from a vendor via FTP every 15 minutes and generate a web page from the data.
    Friday, October 24, 2014 4:54 PM
  • Ok, thanks.  This looks like its a similar provider failure to me.  We'll keep doing research here and see what we can find out.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Friday, October 24, 2014 4:57 PM
  • Same problem with this update. On three (!) different Windows8 systems. 

    One one machine I did a new (clean) Windows 8 installation,  with all updates and still faced this problem.

    These updates (after clean install) are over 1 Tb, so the reverting process take a longggggg time. After rebooting the system took another attempt to install the updates again. I think this could be a serious problem for Microsoft.

    Please help.



    • Edited by wille525 Saturday, October 25, 2014 5:08 PM
    Saturday, October 25, 2014 4:48 PM
  • wille525;

    Are these all Win8 machines or Win8.1 systems?  If you have a Win8.1 system in this state, please provide me a link to the CBS logs if you can.  If these are Win8/2012 systems, I think we're close to understanding what the issue is.


    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Monday, October 27, 2014 2:11 PM
  • Thank Steven! My problem was Windows 8 Pro!
    Monday, October 27, 2014 4:33 PM
  • Everyone,

    A couple of things I wanted to update the thread on:

    1. To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
    2. If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
    3. For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images.  Anything you think might be relevant and would be outside of a 'clean install' from media.
    4. For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue.  Everything I've seen to this point has been on Windows 8/Windows 2012.  I'd love to see logs if you're having an issue.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Monday, October 27, 2014 7:42 PM

  • For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images.  Anything you think might be relevant and would be outside of a 'clean install' from media..


    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Hi Joseph,

    your suggestion was right in my case: My Windows Server 2012 was updated twice, since it is a MSDN-Testserver (Windows Server 2008 -> Windows Server 2008 R2 - > Windows Server 2012).
    Only roles installed are FileServices (Datei/Speicherdienste in German) and Hyper-V-Role.

    And failed update could be installed after I have deleted the specified registry key.


    • Edited by dm01 Monday, October 27, 2014 9:47 PM added additional note
    Monday, October 27, 2014 9:45 PM
  • Thanks for the info, were you able to get the update installed after exporting and deleting the registry key?

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Monday, October 27, 2014 9:48 PM
  • Yes, update was possible after export, delete registy key, then update, then reimport regkey ..
    All running well now.

    Monday, October 27, 2014 9:50 PM
  • Excellent, thanks for the update

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Monday, October 27, 2014 9:51 PM
  • I'm running into this issue as well with a Windows 2012 server (non-R2) that was an upgrade from Windows 2008 R2 system.  I removed the key listed, rebooted, and then was able to install the KB3000061 update successfully.

    This was our only upgraded server and was the only one suffering this issue.


    Tuesday, October 28, 2014 7:15 PM
  • Thanks gintal for the confirmation that this worked for you. 

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Tuesday, October 28, 2014 7:18 PM
  • Hi Joseph

    Deleting the reg key worked here. Update is now installed.

    I don't know much about the back story on this server, except I can see by the C:\Windows.old folder that it was upgraded in place from WS2008 R2 to WS2012. It's now a Hyper-V guest, but it's a pretty safe bet that it became one by being P2V'd.

    I imported the .REG file after the server restarted to restore the registry key, but your instructions don't actually say to do that. Is your advice to keep the registry key in place afterwards, or should it go away?

    Thanks!

    Wednesday, October 29, 2014 3:44 PM
  • Actually, you dont need (or want) to import the key after you've deleted it. What happened is that provider GUID changed in 2012 to a new value. It appears on some upgrades the new value isnt getting properly set. Deleting the key allows the correct provider entry to load.  The correct GUID is 8c416c79-d49b-4f01-a467-e56d3aa8234c for the curious.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Wednesday, October 29, 2014 4:22 PM
  • Cool; thanks for clarifying! Will re-delete the key. And the key with the new GUID exists, which is, I gather, a good thing.

    Thanks!

    Wednesday, October 29, 2014 4:26 PM
  • Yup, thats a very good thing :)

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Wednesday, October 29, 2014 4:31 PM
  • This worked for my win server 2012 (upgraded from win server 2008R2). I just removed the key (as instructed in item1 above). After successful install of the update (including reboot), the key was still gone and the new key, 8c416c79-d49b-4f01-a467-e56d3aa8234c, showed up automatically. So assume that's all that's needed.

    DM

    Thursday, October 30, 2014 6:15 PM
  • Thanks, this was driving me nuts with a install/rollback cycle. Windows 8.0/Pro, deleting the reg key fixed it for me.
    Friday, October 31, 2014 8:11 PM
  • Everyone,

    A couple of things I wanted to update the thread on:

    1. To alleviate this problem on Windows 8 and Windows Server 2012 based systems, please export and delete the following registry value, reboot your system and then re-attempt the update: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
    2. If deleting the above registry value does not resolve the issue for you, please ping this thread as I'd like to see your follow-up CBS.logs from the system
    3. For those of you running Windows 8 and Windows Server 2012, I'd actually like to know some additional information about your environments, namely, if the systems impacted were upgrades of a specific kinda (Vista->Win7->Win8) or if there was a special process used when creating your images.  Anything you think might be relevant and would be outside of a 'clean install' from media.
    4. For Windows 8.1 and Windows Server 2012 R2 customers, I still haven't seen a set of logs to confirm we're seeing the same issue.  Everything I've seen to this point has been on Windows 8/Windows 2012.  I'd love to see logs if you're having an issue.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Hi Joseph,

    I've upgraded my Win8 from Win7 and encountered the same issue. I've confirmed the new key is present and deleting the old one fixed the problem.

    Wednesday, November 5, 2014 11:17 AM
  • Still getting "Failure configuring windows updates, reverting changes"

    Had 2 registry values:
    1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winevt\Publishers\{e7ef96be-969f-414f-97d7-3ddb7b558ccc}
    2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winevt\Publishers\{c882ff1d-7585-4b33-b135-95c577179137}
    Exported and deleted number 1 registry value, rebooted and then re-attempt the update, Failed.
    Then exported and deleted number 2 registry value, rebooted and then re-attempt the update, Failed.

    Here is the link for my CBS.Log files from the system:
    https://onedrive.live.com/redir?resid=839AC5FED0188AB5!109&authkey=!AELtw2IOLzJmXeM&ithint=file%2czip

    Also the system was upgraded from Win7->Win8Pro with Media Center.
    Thursday, November 6, 2014 12:30 PM
  • Is there a reason you deleted the following key?

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winevt\Publishers\{c882ff1d-7585-4b33-b135-95c577179137}

    That provider key has nothing to do with the issue mentioned above and should be present on the system.  If you still have the export, I would reimport it.  The first step you did, so long as the key was deleted is the proper step to take to resolve this issue.  You can see that event in your log here:

    2014-11-06 22:33:32, Error                 CSI    00000002 (F) Logged @2014/11/6:11:33:32.429 : [ml:240{120},l:238{119}]"EventAITrace:Provider Microsoft-Windows-Win32k is already installed with GUID {e7ef96be-969f-414f-97d7-3ddb7b558ccc}.

    "
    [gle=0x80004005]
    2014-11-06 22:33:32, Error                 CSI    00000003 (F) Logged @2014/11/6:11:33:32.429 : [ml:168{84},l:166{83}]"WmiCmiPlugin manproc.cpp(683): InstrumentationManifestAssert failed. HR=0x80073aa2."
    [gle=0x80004005]
    2014-11-06 22:33:32, Error                 CSI    00000004 (F) Logged @2014/11/6:11:33:32.429 : [ml:166{83},l:164{82}]"WmiCmiPlugin eventloghandler.cpp(192): ProcessEventsInstall failed. HR=0x80073aa2."
    [gle=0x80004005]
    2014-11-06 22:33:32, Error                 CSI    00000005 (F) Logged @2014/11/6:11:33:32.429 : [ml:170{85},l:168{84}]"WmiCmiPlugin eventloghandler.cpp(212): EventLogHandlerInstall failed. HR=0x80073aa2."
    [gle=0x80004005]
    2014-11-06 22:33:32, Error                 CSI    00000006@2014/11/6:11:33:32.429 (F) CMIADAPTER: Inner Error Message from AI HRESULT = HRESULT_FROM_WIN32(15010)
     [
    [22]"Configuration error.

    "
    ]
    [gle=0x80004005]
    2014-11-06 22:33:32, Error                 CSI    00000007@2014/11/6:11:33:32.429 (F) CMIADAPTER: AI failed. HRESULT = HRESULT_FROM_WIN32(15010)
     Element:
     [92250]"<events xmlns="http://schemas.microsoft.com/win/2004/08/events">

      <provider guid="{8c416c79-d49b-4f01-a467-e56d3aa8234c}" messageFileName="%SystemRoot%\system32\win32k.sys" name="Microsoft-Windows-Win32k" resourceFileName="%SystemRoot%\system32\win32k.sys" symbol="W32kControlGuid">


    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Thursday, November 6, 2014 3:22 PM
  • I have reimported the deleted key  {c882ff1d-7585-4b33-b135-95c577179137}

    is there anything else I can do to resolve the issue?

    Thanks.
    • Edited by NC5 Friday, November 7, 2014 1:39 AM
    Friday, November 7, 2014 1:35 AM
  • If you've deleted the key I originally mentioned and rebooted the system.  The update should properly install.  If it isnt installing, there might be a different issue on your machine but I'd need to see logs.

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Monday, November 10, 2014 3:39 PM